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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 
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3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
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4) S Claim(s) 1-28 is/are pending in the application. 
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5) D Claim(s) is/are allowed. 

6) S Claim(s) 1-28 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 
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10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 185(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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DETAILED ACTION 
Response to Arguments 

1 . The Applicant's arguments filed 5/2/2006 are not persuasive. As Alkhatib(U.S. 
Patent 6,1 19,171) discloses the translating of external address to internal 
address based on identifiers- see Col 8 Ln 48-59 & Col 13 Ln 25-36(Alkhatib 
discloses the use of connection identifiers and further discloses of reading of 
ASCII string which is part of header(i.e. connection identifiers) to resolve external 
address to internal address). And Alkhatib discloses of the recording of flow of 
packets and using DNS IP lookup for resolving the addresses Col 8 Ln 30-48. 

2. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Response to Amendment 

3. Claim 1-28 are rejected under 35 U.S.C. 102(b) as being anticipated by U.S. 
Patent 6, 11 9, 171 to Alkhatib. 

4. Regarding Claim 1 , Alkhatib discloses the receiving of encrypted packet having 
an identifier and an external address that represents a plurality of internal 
addresses; translating an external address by selecting one of the internal 
addresses associated with identifier and a list of identifiers and communicating 
the encrypted packet to the selected internal address see Fig. 10 item 502 & Col 
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13 Ln 24-55 & Abstract & Col 5 Ln 17-36. And further discloses the receiving of 
encrypted packet and recording the flow and the identifiers resolving the external 
address to internal address based on match of the list see Col 6 Ln 36-45 & Col 
6 Ln 59-Col 7 Ln 5. See also arguments above. 

5. Regarding Claim 2, 13, Alkhatib discloses the searching a list of identifiers having 
associated times; selecting an identifier having an earliest time; and retrieving the 
internal address associated with the selected identifier see Col 1 1 Ln 50- Col 12 
Ln 21 & Col 6 Ln 27-33. 

6. Regarding Claim 3, Alkhatib discloses the creating a list and searching the 
created list see Col 6 Ln 63-Col 7 Ln 5. 

7. Regarding Claim 4, 14, Alkhatib discloses the receiving of encrypted packets 
having predetermined sequence number and an identifier associated with 
internal address see Col 6 Ln 24-26 & Col 8 Ln 67- Col 9 Ln 4 ; determining a 
time the packet was received and associating time and internal addresses with 
identifier see Col 6 Ln 27-33 & Fig. 3 items 66, 62, 64 and 80; storing the 
identifier with associated time and associated internal address see Col. 10 Ln 43- 
53. 
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8. Regarding Claim 8, Alkhatib discloses the receiving the message that is 
encrypted was communicated to incorrect address and further determining 
activity levels and communicating the packet to the one with highest activity level 
see Col 5 Ln 17-36. 

9. Regarding Claim 9, Alkhatib discloses the creating a list of identifiers with each 
terminating at a device having an internal address, translating the internal 
addresses to a external address see Col 6 Ln 63- Col 7 Ln 31 ; the receiving of 
encrypted packet having an identifier and an external address that represents a 
plurality of internal addresses; translating an external address by selecting one of 
the internal addresses associated with identifier and a list of identifiers and 
communicating the encrypted packet to the selected internal address see Fig. 10 
item 502 & Col 13 Ln 24-55 & Abstract & Col 5 Ln 17-36 Col 6 Ln 36-45. And 
further discloses the receiving of encrypted packet and recording the flow and the 
identifiers resolving the external address to internal address based on match of 
the list see Col 6 Ln 59-Col 7 Ln 5. 

1 0. Regarding Claim 1 5, Alkhatib discloses the creating of list of identifiers 
terminating at a device with internal address and selecting an internal address 
using a list of identifiers and set of heuristics for encrypted packet with external 
address and identifier see Col 6 Ln 63- Col 7 Ln 31 & Fig. 10 & Col 5 Ln 17-36 & 
Fig. 1 1 item 512. And further discloses the receiving of encrypted packet and 
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recording the flow and the identifiers resolving the external address to internal 
address based, on match of the list see Col 6 Ln 59-Col 7 Ln 5. 

1 1 . Regarding Claim 16, Alkhatib discloses the communicating the encrypted packet 
to the selected internal address see Fig. 10 item 502 & Col 13 Ln 24-55. 

12. Regarding Claim 17, Alkhatib discloses the first net work sending of encrypted 
packets to an external address see Col 2 Ln 66- Col 3 Ln 28; a second network 
to receive the packets and translate the external address to an internal address ' 
using a set of heuristics see Col 13 Ln 24-55 & Col 5 Ln 17-36, and further 
discloses the receiving of encrypted packet and recording the flow and the 
identifiers resolving the external address to internal address based on match of 
the list see Col 6 Ln 59-Col 7 Ln 5.;a third network to receive the encrypted 
packet see Col 1 3 Ln 49-55. 

13. Regarding Claim 18, Alkhatib discloses the use of natural address 
translation(NAT) see Col 2 Ln 13-29. 

14. Regarding Claim 22, Alkhatib discloses the storage medium see Col 10 Ln 22- 
53; the stored medium having instructions that result in receiving an encrypted 
packet having identifier and an external address that represents a plurality of 
internal address, translating an external address by selecting one of the internal 
addresses associated with identifier using a set of heuristics and a list of 
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identifiers and communicating the encrypted packet to the selected internal 
address see Fig. 10 item 502 & Col 13 Ln 24-55 & Abstract & Col 5 Ln 17-36; a 
third network to receive the encrypted packet see Col 13 Ln 49-55. And further 
discloses the receiving of encrypted packet and recording the flow and the 
identifiers resolving the external address to internal address based on match of 
the list see Col 6 Ln 59-Col 7 Ln 5. 

15. Regarding Claim 23, Alkhatib discloses the searching a list of identifiers having 
associated times; selecting an identifier having an earliest time; and retrieving the 
internal address associated with the selected identifier see Col 1 1 Ln 50- Col 12 
Ln 21 & Col 6 Ln 27-33. 

16. Regarding Claim 24, Alkhatib discloses the creating a list and searching the 
created list see Col 6 Ln 63-Col 7 Ln 5. 

17. Regarding Claim 25, Alkhatib discloses the receiving of encrypted packets 
having predetermined sequence number and an identifier associated with 
internal address see Col 6 Ln 24-26 & Col 8 Ln 67- Col 9 Ln 4 ; determining a 
time the packet was received and associating time and internal addresses with 
identifier see Col 6 Ln 27-33 & Fig. 3 items 66, 62, 64 and 80; storing the 
identifier with associated time and associated internal address see Col. 10 Ln 43- 
53. 
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18. Regarding Claim 26, Alkhatib discloses the storage medium see Col 10 Ln 22- 
53; the creating a list of identifiers with each terminating at a device having an 
internal address, translating the internal addresses to a external address see Col 
6 Ln 63- Col 7 Ln 31 ; the receiving of encrypted packet having an identifier and 
an external address that represents a plurality of internal addresses; translating 
an external address by selecting one of the internal addresses associated with 
identifier using a set of heuristics and a list of identifiers and communicating the 
encrypted packet to the selected internal address see Fig. 10 item 502 & Col 13 
Ln 24-55 & Abstract & Col 5 Ln 17-36; a third network to receive the encrypted 
packet see Col 13 Ln 49-55. And further discloses the receiving of encrypted 
packet and recording the flow and the identifiers resolving the external address to 
internal address based on match of the list see Col 6 Ln 59-Col 7 Ln 5. 

19. Regarding Claim 27, Alkhatib discloses the searching a list of identifiers having 
associated times; selecting an identifier having an earliest time; and retrieving the 
internal address associated with the selected identifier see Col 1 1 Ln 50- Col 12 
Ln 21 & Col 6 Ln 27-33. 

20. Regarding Claim 28, Alkhatib discloses the receiving of encrypted packets • 
having predetermined sequence number and an identifier associated with 
internal address see Col 6 Ln 24-26 & Col 8 Ln 67- Col 9 Ln 4 ; determining a 
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time trie packet was received and associating time and internal addresses with 
identifier see Col 6 Ln 27-33 & Fig. 3 items 66, 62, 64 and 80; storing the 
identifier with associated time and associated internal address see Col. 10 Ln 43- 
53. 

Claim Rejections - 35 USC § 103 

21. Claim 5-7, 10-12, 19-21, rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. Patent 6,1 19,171 to Alkhatib in view of EP 1 130846 A2 to Nexland. 

22. Regarding Claim 5-7, 10-12, Alkhatib does not disclose the packet being 
encrypted according to Internet Security Association and Key Management 
Protocol(ISAKMP), Encapsulating Security Payload(ESP), and identifier being a 
Security Parameter Index(SPI). However, Nexland discloses the ISAKMP, ESP 
and SPI see Col 5 Ln 26-39 & Col 5 Ln 4-16. It would be obvious to one having 
ordinary skill in the art at the time of the invention to include ISAKMP and ESP in 
the invention of Alkhatib in order to secure environment for communication as 
taught in Nexland see Par 0012 Ln 40-43. 

Conclusion 

23. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). A shortened statutory period for reply to • 
this final action is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS of the mailing date 
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of this final action and the advisory action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee 
pursuant to.37 CFR 1 .136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire 
later than SIX MONTHS from the mailing date of this final action. 

1 24. Any inquiry concerning this communication or earlier communications from the 
- examiner should be directed to Venkatanarayanan Perungavoor whose 
telephone number is 571-272-7213. The examiner can normally be reached on 
8-4:30. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Gilberto Barron can be reached on 571-272-3799. The 
fax phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 
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25. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR 
only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 
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